Building problem domain ontology from security requirements in regulatory documents

Proceedings - International Conference on Software Engineering

Volumn 2006-May, Issue , 2006, Pages 43-49

  Lee, Seok Won ^a   Gandhi, Robin ^a   Muthurajan, Divya ^a   Yavagal, Deepak ^a   Ahn, Gail Joon ^a  

^a University of North Carolina at Charlotte   (United States)

Author keywords

Information Security Requirements Engineering; Information Systems Certification and Accreditation; Ontological Engineering; Secure Software Assurance

Indexed keywords

ACCREDITATION; ONTOLOGY; REQUIREMENTS ENGINEERING; SECURITY OF DATA; SOFTWARE ENGINEERING;

DEPARTMENT OF DEFENSE; INFORMATION SECURITY REQUIREMENTS; LEVELS OF ABSTRACTION; ONTOLOGICAL ENGINEERING; OPERATIONAL ENVIRONMENTS; SECURE SOFTWARE; SECURITY REQUIREMENTS; SOFTWARE INTENSIVE SYSTEMS;

C (PROGRAMMING LANGUAGE);

EID: 84953384559     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1137627.1137635     Document Type: Conference Paper

References (28)

1. Breaux, T.D., Antón, A.I., "Analyzing Goal Semantics for Rights, Obligations, and Permissions." In Proc. of the 13th Int'l Conf. on Requirements Engineering (RE '05), Paris, France, 2005.
2. Breitman, K.K., Leite, J., "Ontology as a Requirements Engineering Product", In Proc. of the IEEE Int'l Requirements Engineering Conf., 2003
3. Carroll, J. J., Dickinson, I., Dollin, C., Reynolds, D., Seaborne, A., Wilkinson, K., "Jena: implementing the semantic web recommendations," In Proc. of the 13th Int'l World Wide Web Conf., USA, pp: 74-83, 2004
4. Chaudhri, V. K., Farquhar, A., Fikes, R., Karp, P. D., Rice, J. P., "OKBC: a programmatic foundation for knowledge base interoperability," In Proc. of the 15th National/10th Conf. on Artificial intelligence/innovative Applications of Artificial intelligence, AAAI, CA, USA, pp: 600-607, 1998.
5. DoD 8510.1-M, "DITSCAP Application Manual," 2000.
6. DoD Instruction 5200.40, "DITSCAP," 1997.
7. DoDD 8500.1. Information Assurance. Oct. 2002.
8. DoDI 8500.2. IA Implementation. Feb 2003
9. Evermann, J., Wand, Y., "Ontology based object-oriented domain modeling: fundamental concepts," Requirements Engineering Journal, Springer 2005.
10. Jackson, M., "The Meaning of Requirements," Annals of Software Engineering, Vol 3, Baltzer Science Publishers, pp. 5-21, 1997
11. Kimbell, J., Walrath, M, "Life Cycle Security and DITSCAP". IANewsletter, Vol. 4, No. 2., Spring 2001
12. Kotonya, G., Sommerville, I., "Requirements Engineering with Viewpoints," BCS/IEE Software Engineering Journal, pp. 5-18, Vol. 11, Issue: 1, Jan. 1996
13. Lau, G.T., Kincho H. Law, Wiederhold, G., "Analyzing Government Regulations Using Structural and Domain Information," IEEE Computer, Vol. 38, Issue 12, pp.70-76, December 2005
14. Lee, S. W., Gandhi, R. A., Ahn, G, "Establishing Trustworthiness in Services of the Critical Infrastructure: Automating the DITSCAP", In Proc. of the Workshop on Software Engineering for Secure Systems (SESS05), 27th Int'l Conf. on Software Engineering (ICSE '05), pp.43-49, May 2005
15. Lee, S. W., Gandhi, R. A., Ahn, G., "Security Requirements Driven Risk Assessment for Critical Infrastructure Information Systems", In Proc. of the Symposium on Requirements Engineering for Information Security (SREIS 05), Requirements Engineering, France, IEEE Computer Society, 2005
16. Lee, S. W., Gandhi, R. A., and Ahn, G., "Certification Process Artifacts Defined as Measurable Units for Software-intensive Systems Lifecycle" To Appear in Software Process Improvement and Practice Journal, Wiley, 2006
17. Lee, S.W., Gandhi, R.A, "Engineering Dependability Requirements for Software-intensive Systems through the Definition of a Common Language", In Proc. of the 13th IEEE Int'l Requirements Engineering Conf. (RE '05), Workshop on Requirements Engineering for High-Availability Systems (RHAS), Paris, France, pp. 40-48, 2005
18. Lee, S.W. and Gandhi, R. A., "Ontology-based Active Requirements Engineering Framework", In Proc. of 12th Asia-Pacific Software Engineering Conf. (APSEC '05), Taiwan, 2005. IEEE CS Press
19. Lee, S.W., Rine, D.C., "Case Study Methodology Designed Research in Software Engineering Methodology Validation," In Proc. of the 16th Int'l Conf. on Software Eng. and Knowledge Eng., Canada, 2004, pp: 117-122
20. Lee, S.W., Yavagal, D., "GenOM User's Guide V2.0," Technical Report TR-NiSE-05-05, Knowledge Intensive Software Engineering Research Group, Dept. of Software and Information Systems, UNC Charlotte, 2005
21. Leite JCSP, Franco, APM. "A strategy for conceptual model acquisition," In proc. of the IEEE Int'l symposium on Requirements Engineering (RE '93). IEEE Computer Society Press, Los Alamitos, CA, pp 243-246, 1993
22. Liu, L., Yu, E., "Designing Information Systems in Social Context: A Goal and Scenario Modeling Approach," Information Systems Journal. Vol. 29(2), Elsevier, 2003
23. McGuinness, D., van Harmelen, F. (editors), "OWL Web Ontology Language Overview", W3C Recommendation, 10th February 2004
24. OMB Circular No. A-130, "Management of Federal Information Resources," Feb 8 , 1996
25. Press Release, "Tom Davis Statement on 2004 Federal Computer Security Report Card Grades", 2004
26. Rolland, C., Souveyet, C., Achour, C. B., "Guiding Goal Modeling Using Scenarios," IEEE Trans. on Software Eng., Vol. 24:12, pp: 1055-1071, 1998
27. Sutcliffe, A. "Scenario-based requirements analysis", Requirements Engineering Journal, Vol 3(1), Springer-Verlag, Inc., pp: 48-65, 1998.
28. van Lamsweerde, A., "Goal-oriented requirements engineering: a guided tour," In Proc. of the 5th Int'l Symp. on RE, Canada, pp. 249-262, 2001